@carl Have you folks considered looking at the new system Fedora has put together to replace their FAS? @hellcp and I been working with them quite a bit for the future openSUSE Accounts system and it's been quite nice.